Legal

Privacy Policy

Last updated: 15 November 2026 · Operated by THEME SEVA

01 Overview

This Privacy Policy explains how THEME SEVA ("we", "us", "our") collects, uses, shares, and protects information when you use SafePayUPI (the "Service"). It applies to merchants who register for an account and to visitors of our website.

SafePayUPI generates UPI QR codes, links, and pages against a UPI ID you provide. We do not process or hold your funds, and we do not collect the banking credentials (UPI PIN, card numbers, net-banking passwords) used to complete a payment — those stay between you, your payer, and your bank or UPI app.

02 Information we collect

CategoryExamples
Account informationName, mobile number, email, password (stored as a hash)
Business informationBusiness name, UPI ID, address, GSTIN (if provided)
KYC documentsPAN, business registration proof, identity/address proof submitted for verification
Transaction metadataQR/link creation time, amount requested, status, reference IDs — not your payer's banking credentials
Support communicationsMessages sent via our contact form, email, or WhatsApp support
Technical dataIP address, browser type, device information, pages visited

03 KYC & verification data

Where the Service requires KYC verification, documents you submit are used solely to verify your identity and eligibility to use payment-related features, and to meet our obligations under applicable law. We retain KYC documents for as long as your account is active and for the period required by law after closure.

04 How we use information

  • To create and manage your account, and provide the QR/link/page generation features
  • To verify your identity and business during KYC review
  • To process billing for your subscription plan
  • To respond to support requests
  • To detect and prevent fraud, abuse, or violations of our Terms
  • To send service notices (e.g. plan expiry, security alerts); marketing messages only if you opt in

05 Sharing & disclosure

We do not sell your personal information. We share information only:

  • With service providers who help us operate the Service (hosting, SMS/email delivery, payment processing for your subscription fee) under confidentiality obligations
  • Where required by law, court order, or a government/regulatory authority (including RBI or NPCI in relation to UPI)
  • To protect the rights, safety, or property of THEME SEVA, our merchants, or the public
  • In connection with a merger, acquisition, or sale of assets, with notice to you

06 Cookies & tracking

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may limit some features (such as staying logged in).

07 Data retention

We retain account and transaction metadata for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and fraud-prevention obligations. KYC records are retained as required under applicable regulation. You can request deletion of information we're not legally required to keep — see Section 9.

08 Data security

We use technical and organizational measures — including password hashing, access controls, and encrypted connections — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09 Your rights & choices

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of information we are not required to retain
  • Withdraw consent for optional processing (e.g. marketing communications)
  • Lodge a complaint with the relevant data protection authority

To exercise these rights, contact us using the details in Section 13.

10 Children's privacy

The Service is intended for merchants aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will take steps to remove it.

11 International transfers

Our infrastructure and service providers may process information outside your home country. Where this occurs, we take steps to ensure information continues to receive an appropriate level of protection consistent with this policy and applicable law.

12 Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified through the dashboard or by email before they take effect. The "Last updated" date at the top reflects the most recent revision.

13 Grievance officer & contact

In accordance with Indian IT Rules, questions, complaints, or requests relating to this policy can be directed to our Grievance Officer:

We aim to acknowledge complaints within a reasonable time and resolve them as required by applicable law.